Rambo Codes

A couple of months ago, I was a few minutes away from joining a video call in my office when I noticed I hadn’t set up my ring light yet.

Some bugs are more interesting than others.

I was listening to an episode of one of my favorite podcasts this weekend.

This is the story of how I found one of my favorite iOS vulnerabilities so far.

If you’ve been reading my previous posts about security vulnerabilities that I discovered on Apple’s operating systems, you’ve probably noticed a pattern of bugs being caused by improper validation of clients by XPC services.

TL;DR: Any app with access to Bluetooth could record your conversations with Siri and audio from the iOS keyboard dictation feature when using AirPods or Beats headsets.

This year's WWDC introduced many new APIs, two of which caught my attention: ExtensionFoundation and ExtensionKit.

Phishing attacks are a very common threat in our digital lives.

My friend, podcaster and fellow indie developer Casey Liss has just released his latest app, MaskerAid.

I’ve been working on a new app in my spare time using the new Swift Playgrounds 4 for iPad.

It’s been just a couple of weeks since Apple introduced the new Swift Playgrounds 4 for iPad, which now enables full app creation and publishing directly from an iPad, but many people are already making some really interesting projects with the app.

The most common application of CloudKit by far is to store private user data with the goal of keeping their devices in sync.

Programming microcontrollers is something I’ve always liked to do, there’s something very satisfying about writing code that controls things in “real life”, instead of just pixels on a screen.

The Mac has always been very different from its close relative, iOS, especially when it comes to what a user is or is not allowed to run on their system.

Update (September 29, 2020): With Xcode 12.2 beta 2, Apple has added an official template to create macOS Intents extensions.

One of my favorite new things announced during this year’s WWDC was App Clips.

UPDATE JUL 10, 2020: It has come to my attention that implementing the Facebook login flow without using their SDK is against their terms of service for third-party applications, further confirming that Facebook is more interested in gathering data about…

The new iPad Pro is here!

Writing automated tests like unit, integration, or UI tests can be a great way to have reproducible steps that ensure an app is working the way we expect it to.

Note: this article is a revision of the article I wrote back in 2017.

This article is basically the script from the talk I presented at dotSwift in Paris.

DISCLAIMER: this is not a tutorial on how to use the Keychain or Keychain Sharing.

Whenever Apple introduces a new technology for developers, there’s always the question: “Can I use this thing right now for my projects?”.

Every time I’ve had to change something in the launch screen on any of my iOS apps, I’ve faced an issue: the system caches launch images and is really bad at clearing said cache, even after the app has been deleted.

Update 2019, Nov 22: Apple reached out and resolved the situation.

Using private APIs can be fun.

I should start by explaining what I mean by “animations are assets”.

Maybe this is not common for all developers, but as an iOS developer, one of my favorite things to implement are beautiful user interfaces and cute animations.

Bundles and asset catalogs are features of Apple's systems every developer and app is using, even though many developers are probably not aware of their existence or how powerful they can be, especially when used together.